Bump the dependencies group across 1 directory with 17 updates #285

dependabot · 2026-01-26T22:54:08Z

Bumps the dependencies group with 17 updates in the / directory:

Package	From	To
sphinx-autobuild	`2024.10.3`	`2025.8.25`
sphinx-rtd-theme	`3.0.2`	`3.1.0`
anyio	`4.9.0`	`4.12.1`
certifi	`2025.6.15`	`2026.1.4`
charset-normalizer	`3.4.2`	`3.4.4`
click	`8.2.1`	`8.3.1`
idna	`3.10`	`3.11`
markupsafe	`3.0.2`	`3.0.3`
packaging	`25.0`	`26.0`
requests	`2.32.4`	`2.32.5`
roman-numerals-py	`3.1.0`	`4.1.0`
starlette	`0.49.1`	`0.52.1`
typing-extensions	`4.14.0`	`4.15.0`
urllib3	`2.6.0`	`2.6.3`
uvicorn	`0.34.3`	`0.40.0`
watchfiles	`1.1.0`	`1.1.1`
websockets	`15.0.1`	`16.0`

Updates sphinx-autobuild from 2024.10.3 to 2025.8.25

Release notes

Sourced from sphinx-autobuild's releases.

Release 2025.08.25

2025.08.25

Changelog

Sourced from sphinx-autobuild's changelog.

Changelog

unreleased

Set Cache-Control header to no-cache for served files.

2025.08.25 - 2025-08-25

Drop support for Python 3.9-3.10 to match Sphinx.

Declare support for Python 3.14.

Add an optional --post-build flag to run additional commands after building the documentation.

Add support for the SPHINX_AUTOBUILD_DEBUG environment variable to help with debugging.

2024.10.03 - 2024-10-03

Improve error handling for failures in pre-build commands.

2024.10.02 - 2024-10-02

Show the changed paths that triggered the rebuild.

2024.09.19 - 2024-09-19

Fix path filtering on Windows by normalising path separators.

Filter various directories by default (.git, venv, etc).

Serve the correct directory when using make mode (-M).

2024.09.18 - 2024-09-18

Run Sphinx through the Python entry point rather than the binary on PATH.

2024.09.17 - 2024-09-17

Relax checks for paths that aren't required to exist.

2024.09.03 - 2024-09-03

Fix support for Python 3.9.

Fix running sphinx-autobuild via entry point scripts.

... (truncated)

Commits

fd726c5 Release 2025.08.25
f810750 Update pre-commit versions
12e0553 Format pyproject.toml
6d039d4 Declare support for Python 3.14
c4a47b0 Fix name of 'test' nox session in docs (#193)
48fcf5c Fix --help with Python 3.14 and Sphinx 8.2.3 (#199)
0c52892 Add SPHINX_AUTOBUILD_DEBUG to aid debugging (#192)
cc58cc1 Add a --post-build argument (#190)
92bcf10 Require Python 3.11 or newer, to match Sphinx (#189)
See full diff in compare view

Updates sphinx-rtd-theme from 3.0.2 to 3.1.0

Changelog

Sourced from sphinx-rtd-theme's changelog.

3.1.0

Added support for docutils 0.22

Added support for Sphinx 9.x

.. _release-3.1.0rc2:

3.1.0rc2

Added support for docutils 0.22

.. _release-3.1.0rc1:

3.1.0rc1

Added support for Sphinx 9.x

.. _release-3.0.2:

Commits

795de79 Release 3.1.0 (#1676)
66d0fdd Add Python 3.14 to the test suite (#1668)
fbe5e60 3.1.0rc2 with support for docutils 0.22 (#1674)
a76174c Add support for docutils 0.22 (#1671)
20733c3 Add support for Sphinx 9.0.0 (#1666)
71aacd3 Update Code of Conduct URL (#1664)
5a26375 Run tests and build docs with Sphinx 8.2 (#1640)
8d4d394 Sidebar should not be floating on mobile (#1622)
See full diff in compare view

Updates anyio from 4.9.0 to 4.12.1

Release notes

Sourced from anyio's releases.

4.12.1

Changed all functions currently raising the private NoCurrentAsyncBackend exception (since v4.12.0) to instead raise the public NoEventLoopError exception (#1048)

Fixed anyio.functools.lru_cache not working with instance methods (#1042)

4.12.0

Added support for asyncio's task call graphs on Python 3.14 and later when using AnyIO's task groups (#1025)

Added an asynchronous implementation of the functools module (#1001)

Added support for uvloop=True on Windows via the winloop implementation (#960; PR by @Vizonex)

Added support for use as a context manager to anyio.lowlevel.RunVar (#1003)

Added __all__ declarations to public submodules (anyio.lowlevel etc.) (#1009)

Added the ability to set the token count of a CapacityLimiter to zero (#1019; requires Python 3.10 or later when using Trio)

Added parameters case_sensitive and recurse_symlinks along with support for path-like objects to anyio.Path.glob() and anyio.Path.rglob() (#1033; PR by @northisup)

Dropped sniffio as a direct dependency and added the get_available_backends() function (#1021)

Fixed Process.stdin.send() not raising ClosedResourceError and BrokenResourceError on asyncio. Previously, a non-AnyIO exception was raised in such cases (#671; PR by @gschaffner)

Fixed Process.stdin.send() not checkpointing before writing data on asyncio (#1002; PR by @gschaffner)

Fixed a race condition where cancelling a Future from BlockingPortal.start_task_soon() would sometimes not cancel the async function (#1011; PR by @gschaffner)

Fixed the presence of the pytest plugin causing breakage with older versions of pytest (<= 6.1.2) (#1028; PR by @saper)

Fixed a rarely occurring RuntimeError: Set changed size during iteration while shutting down the process pool when using the asyncio backend (#985)

4.11.0

Added support for cancellation reasons (the reason parameter to CancelScope.cancel()) (#975)

Bumped the minimum version of Trio to v0.31.0

Added the ability to enter the event loop from foreign (non-worker) threads by passing the return value of anyio.lowlevel.current_token() to anyio.from_thread.run() and anyio.from_thread.run_sync() as the token keyword argument (#256)

Added pytest option (anyio_mode = "auto") to make the pytest plugin automatically handle all async tests (#971)

Added the anyio.Condition.wait_for() method for feature parity with asyncio (#974)

Changed the default type argument of anyio.abc.TaskStatus from Any to None (#964)

Fixed TCP listener behavior to guarantee the same ephemeral port is used for all socket listeners when local_port=0 (#857; PR by @11kkw and @agronholm)

Fixed inconsistency between Trio and asyncio where a TCP stream that previously raised a BrokenResourceError on send() would still raise BrokenResourceError after the stream was closed on asyncio, but ClosedResourceError on Trio. They now both raise a ClosedResourceError in this scenario. (#671)

4.10.0

Added the feed_data() method to the BufferedByteReceiveStream class, allowing users to inject data directly into the buffer

Added various class methods to wrap existing sockets as listeners or socket streams:

SocketListener.from_socket()

SocketStream.from_socket()

UNIXSocketStream.from_socket()

UDPSocket.from_socket()

ConnectedUDPSocket.from_socket()

UNIXDatagramSocket.from_socket()

ConnectedUNIXDatagramSocket.from_socket()

Added a hierarchy of connectable stream classes for transparently connecting to various remote or local endpoints for exchanging bytes or objects

Added context manager mix-in classes (anyio.ContextManagerMixin and anyio.AsyncContextManagerMixin) to help write classes that embed other context managers, particularly cancel scopes or task groups (#905; PR by @agronholm and @tapetersen)

Added the ability to specify the thread name in start_blocking_portal() (#818; PR by @davidbrochart)

Added anyio.notify_closing to allow waking anyio.wait_readable and anyio.wait_writable before closing a socket. Among other things, this prevents an OSError on the ProactorEventLoop. (#896; PR by @graingert)

Incorporated several documentation improvements from the EuroPython 2025 sprint (special thanks to the sprinters: Emmanuel Okedele, Jan Murre, Euxenia Miruna Goia and Christoffer Fjord)

Added a documentation page explaining why one might want to use AnyIO's APIs instead of asyncio's

Updated the to_interpreters module to use the public concurrent.interpreters API on Python 3.14 or later

Fixed anyio.Path.copy() and anyio.Path.copy_into() failing on Python 3.14.0a7

Fixed return annotation of __aexit__ on async context managers. CMs which can suppress exceptions should return bool, or None otherwise. (#913; PR by @Enegg)

Fixed rollover boundary check in SpooledTemporaryFile so that rollover only occurs when the buffer size exceeds max_size (#915; PR by @11kkw)

Migrated testing and documentation dependencies from extras to dependency groups

... (truncated)

Commits

a0dccbd Bumped up the version
e1121a7 Enabled tests for the 4.12.x branch
69ab43e Fixed anyio.functools.lru_cache not working with methods (#1056)
4f4b33e Remove BlockingPortal.__new__ hack (#1053)
af17d89 Replaced the NoCurrentAsyncBackend exception with NoEventLoopError (#1049)
4310264 Updated pre-commit modules
0cc6723 Bump the github-actions group with 3 updates (#1051)
bc021b6 Fixed the download-artifact settings to retain the expected behavior
c6000aa Corrected the format of the version in the changelog
9d1bfe0 Bumped up the version
Additional commits viewable in compare view

Updates certifi from 2025.6.15 to 2026.1.4

Commits

c64d9f3 2026.01.04 (#389)
4ac232f Bump actions/download-artifact from 6.0.0 to 7.0.0 (#387)
95ae4b2 Update CI workflow to use Ubuntu 24.04 and Python 3.14 stable (#386)
b72a7b1 Bump dessant/lock-threads from 5.0.1 to 6.0.0 (#385)
ecc2672 Bump actions/upload-artifact from 5.0.0 to 6.0.0 (#384)
6a897db Bump peter-evans/create-pull-request from 7.0.11 to 8.0.0 (#383)
27ca98a Bump peter-evans/create-pull-request from 7.0.9 to 7.0.11 (#381)
56c59a6 Bump actions/checkout from 6.0.0 to 6.0.1 (#382)
ae0021c Bump actions/setup-python from 6.0.0 to 6.1.0 (#380)
ddf5d0b Bump actions/checkout from 5.0.1 to 6.0.0 (#378)
Additional commits viewable in compare view

Updates charset-normalizer from 3.4.2 to 3.4.4

Release notes

Sourced from charset-normalizer's releases.

Version 3.4.4

3.4.4 (2025-10-13)

Changed

Bound setuptools to a specific constraint setuptools>=68,<=81.

Raised upper bound of mypyc for the optional pre-built extension to v1.18.2

Removed

setuptools-scm as a build dependency.

Misc

Enforced hashes in dev-requirements.txt and created ci-requirements.txt for security purposes.

Additional pre-built wheels for riscv64, s390x, and armv7l architectures.

Restore multiple.intoto.jsonl in GitHub releases in addition to individual attestation file per wheel.

Version 3.4.3

3.4.3 (2025-08-09)

Changed

mypy(c) is no longer a required dependency at build time if CHARSET_NORMALIZER_USE_MYPYC isn't set to 1. (#595) (#583)

automatically lower confidence on small bytes samples that are not Unicode in detect output legacy function. (#391)

Added

Custom build backend to overcome inability to mark mypy as an optional dependency in the build phase.

Support for Python 3.14

Fixed

sdist archive contained useless directories.

automatically fallback on valid UTF-16 or UTF-32 even if the md says it's noisy. (#633)

Misc

SBOM are automatically published to the relevant GitHub release to comply with regulatory changes. Each published wheel comes with its SBOM. We choose CycloneDX as the format.

Prebuilt optimized wheel are no longer distributed by default for CPython 3.7 due to a change in cibuildwheel.

Changelog

Sourced from charset-normalizer's changelog.

3.4.4 (2025-10-13)

Changed

Bound setuptools to a specific constraint setuptools>=68,<=81.

Raised upper bound of mypyc for the optional pre-built extension to v1.18.2

Removed

setuptools-scm as a build dependency.

Misc

Enforced hashes in dev-requirements.txt and created ci-requirements.txt for security purposes.

Additional pre-built wheels for riscv64, s390x, and armv7l architectures.

Restore multiple.intoto.jsonl in GitHub releases in addition to individual attestation file per wheel.

3.4.3 (2025-08-09)

Changed

mypy(c) is no longer a required dependency at build time if CHARSET_NORMALIZER_USE_MYPYC isn't set to 1. (#595) (#583)

automatically lower confidence on small bytes samples that are not Unicode in detect output legacy function. (#391)

Added

Custom build backend to overcome inability to mark mypy as an optional dependency in the build phase.

Support for Python 3.14

Fixed

sdist archive contained useless directories.

automatically fallback on valid UTF-16 or UTF-32 even if the md says it's noisy. (#633)

Misc

SBOM are automatically published to the relevant GitHub release to comply with regulatory changes. Each published wheel comes with its SBOM. We choose CycloneDX as the format.

Prebuilt optimized wheel are no longer distributed by default for CPython 3.7 due to a change in cibuildwheel.

Commits

b30ffdc 🔧 fix checksum step in cd.yml
d3fbfcf 🔧 fix cd.yml
dafbb95 Release 3.4.4 (#658)
1f18ffa ⬆️ raise mypy upper bound to 1.18.2
ef4ac69 Merge branch 'release-3.4.4' of github.com:jawah/charset_normalizer into rele...
4b35dda 📝 write changelog for 3.4.4
0ec6452 🔧 update cd.yml workflow (add riscv64, s390x and armv7l)
f341ede ⬆️ upgrade dependencies (dev, ci)
a308841 📝 write changelog for 3.4.4
9c906da 🔧 update cd.yml workflow (add riscv64, s390x and armv7l)
Additional commits viewable in compare view

Updates click from 8.2.1 to 8.3.1

Release notes

Sourced from click's releases.

8.3.1

This is the Click 8.3.1 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.3.1/ Changes: https://click.palletsprojects.com/page/changes/#version-8-3-1 Milestone: https://github.com/pallets/click/milestone/28

Don't discard pager arguments by correctly using subprocess.Popen. #3039 #3055

Replace Sentinel.UNSET default values by None as they're passed through the Context.invoke() method. #3066 #3065 #3068

Fix conversion of Sentinel.UNSET happening too early, which caused incorrect behavior for multiple parameters using the same name. #3071 #3079

Fix rendering when prompt and confirm parameter prompt_suffix is empty. #3019 #3021

When Sentinel.UNSET is found during parsing, it will skip calls to type_cast_value. #3069 #3090

Hide Sentinel.UNSET values as None when looking up for other parameters through the context inside parameter callbacks. #3136 #3137

8.3.0

This is the Click 8.3.0 feature release. A feature release may include new features, remove previously deprecated code, add new deprecation, or introduce potentially breaking changes.

We encourage everyone to upgrade. You can read more about our Version Support Policy on our website.

PyPI: https://pypi.org/project/click/8.3.0/ Changes: https://click.palletsprojects.com/page/changes/#version-8-3-0 Milestone https://github.com/pallets/click/milestone/27

Improved flag option handling: Reworked the relationship between flag_value and default parameters for better consistency:

The default parameter value is now preserved as-is and passed directly to CLI functions (no more unexpected transformations)

Exception: flag options with default=True maintain backward compatibility by defaulting to their flag_value

The default parameter can now be any type (bool, None, etc.)

Fixes inconsistencies reported in: #1992 #2514 #2610 #3024 #3030

Allow default to be set on Argument for nargs = -1. #2164 #3030

Show correct auto complete value for nargs option in combination with flag option #2813

Show correct auto complete value for nargs option in combination with flag option #2813

Fix handling of quoted and escaped parameters in Fish autocompletion. #2995 #3013

Lazily import shutil. #3023

Properly forward exception information to resources registered with click.core.Context.with_resource(). #2447 #3058

Fix regression related to EOF handling in CliRunner. #2939 #2940

8.2.2

This is the Click 8.2.2 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.2.2/

... (truncated)

Changelog

Sourced from click's changelog.

Version 8.3.1

Released 2025-11-15

Don't discard pager arguments by correctly using subprocess.Popen. :issue:3039 :pr:3055

Replace Sentinel.UNSET default values by None as they're passed through the Context.invoke() method. :issue:3066 :issue:3065 :pr:3068

Fix conversion of Sentinel.UNSET happening too early, which caused incorrect behavior for multiple parameters using the same name. :issue:3071 :pr:3079

Hide Sentinel.UNSET values as None when looking up for other parameters through the context inside parameter callbacks. :issue:3136 :pr:3137

Fix rendering when prompt and confirm parameter prompt_suffix is empty. :issue:3019 :pr:3021

When Sentinel.UNSET is found during parsing, it will skip calls to type_cast_value. :issue:3069 :pr:3090

Version 8.3.0

Released 2025-09-17

Improved flag option handling: Reworked the relationship between flag_value and default parameters for better consistency:

The default parameter value is now preserved as-is and passed directly to CLI functions (no more unexpected transformations)

Exception: flag options with default=True maintain backward compatibility by defaulting to their flag_value

The default parameter can now be any type (bool, None, etc.)

Fixes inconsistencies reported in: :issue:1992 :issue:2514 :issue:2610 :issue:3024 :pr:3030

Allow default to be set on Argument for nargs = -1. :issue:2164 :pr:3030

Show correct auto complete value for nargs option in combination with flag option :issue:2813

Fix handling of quoted and escaped parameters in Fish autocompletion. :issue:2995 :pr:3013

Lazily import shutil. :pr:3023

Properly forward exception information to resources registered with click.core.Context.with_resource(). :issue:2447 :pr:3058

Fix regression related to EOF handling in CliRunner. :issue:2939 :pr:2940

Version 8.2.2

Released 2025-07-31

Fix reconciliation of default, flag_value and type parameters for flag options, as well as parsing and normalization of environment variables.

... (truncated)

Commits

1d038f2 release version 8.3.1
03f3889 Fix Ruff UP038 warning (#3141)
3867781 Fix Ruff UP038 warning
b91bb95 Provide altered context to callbacks to hide UNSET values as None (#3137)
437e1e3 Temporarily provide a fake context to the callback to hide UNSET values as ...
ea70da4 Don't test using a file in docs/ (#3102)
e27b307 Make uv run --all-extras pyright --verifytypes click pass (#3072)
a92c573 Fix test_edit to work with BSD sed (#3129)
bd131e1 Fix test_edit to work with BSD sed
0b5c6b7 Add Best practices section (#3127)
Additional commits viewable in compare view

Updates idna from 3.10 to 3.11

Changelog

Sourced from idna's changelog.

3.11 (2025-10-12)

Update to Unicode 16.0.0, including significant changes to UTS46 processing. As a result of Unicode ending support for it, transitional processing no longer has an effect and returns the same result.

Add support for Python 3.14, lowest supported version is Python 3.8.

Various updates to packaging, including PEP 740 support.

Commits

ad949ee Release v3.11
cae4ba7 Second release candidate for 3.11
8adb305 Add space in RST link
74cb2b6 Release candidate for 3.11
05dab09 Format idna-data with ruff
90eac78 Apply ruff formatting
a31ce7e Remove errant test vectors
81f0333 Omit vectors known to be broken in test suite
a0f3257 Merge branch 'master' into unicode-16-uts46-changes
38d9886 Remove extra UTS46 test vector
Additional commits viewable in compare view

Updates markupsafe from 3.0.2 to 3.0.3

Release notes

Sourced from markupsafe's releases.

3.0.3

This is the MarkupSafe 3.0.3 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/MarkupSafe/3.0.3/ Changes: https://markupsafe.palletsprojects.com/page/changes/#version-3-0-3 Milestone: https://github.com/pallets/markupsafe/milestone/15?closed=1

__version__ raises DeprecationWarning instead of UserWarning. #487

Adopt multi-phase initialization PEP 489 for the C extension. #494

Build Windows ARM64 wheels. #485

Build Python 3.14 wheels. #503

Build riscv64 wheels. #505

Changelog

Sourced from markupsafe's changelog.

Version 3.0.3

Released 2025-09-27

__version__ raises DeprecationWarning instead of UserWarning. :issue:487

Adopt multi-phase initialisation (:pep:489) for the C extension. :issue:494

Build Windows ARM64 wheels. :issue:485

Build Python 3.14 wheels. :issue:503

Build riscv64 wheels. :issue:505

Commits

297fc8e release version 3.0.3
7e4e6ce Free-threading: run with pytest-run-paralell (#507)
6100b9c enable riscv64 wheels (#506)
c9d5ecf enable riscv64 wheels
2f9b337 tox for 3.14
78d951a update dev dependencies
bb6744e add entry
65c4134 upgrade cibuildwheel, add cp314 wheels and test on CPython 3.14 (#504)
3a9bd88 add cp314 wheels
aafe44d remove slsa provenance (#501)
Additional commits viewable in compare view

Updates packaging from 25.0 to 26.0

Release notes

Sourced from packaging's releases.

26.0

Read about the performance improvements here: https://iscinumpy.dev/post/packaging-faster.

What's Changed

Features:

PEP 751: support pylock by @sbidoul in pypa/packaging#900

PEP 794: import name metadata by @brettcannon in pypa/packaging#948

Support writing metadata by @henryiii in pypa/packaging#846

Support __replace__ for Version by @henryiii in pypa/packaging#1003

Support positional pattern matching for Version and Specifier by @henryiii in pypa/packaging#1004

Behavior adaptations:

PEP 440 handling of prereleases for Specifier.contains, SpecifierSet.contains, and SpecifierSet.filter by @notatallshaw in pypa/packaging#897

Handle PEP 440 edge case in SpecifierSet.filter by @notatallshaw in pypa/packaging#942

Adjust arbitrary equality intersection preservation in SpecifierSet by @notatallshaw in pypa/packaging#951

Return False instead of raising for .contains with invalid version by @Liam-DeVoe in pypa/packaging#932

Support arbitrary equality on arbitrary strings for Specifier and SpecifierSet's filter and contains method. by @notatallshaw in pypa/packaging#954

Only try to parse as Version on certain marker keys, return False on unequal ordered comparsions by @JP-Ellis in pypa/packaging#939

Fixes:

Update _hash when unpickling Tag() by @dholth in pypa/packaging#860

Correct comment and simplify implicit prerelease handling in Specifier.prereleases by @notatallshaw in pypa/packaging#896

Use explicit _GLibCVersion NamedTuple in _manylinux by @cthoyt in pypa/packaging#868

Detect invalid license expressions containing () by @bwoodsend in pypa/packaging#879

Correct regex for metadata 'name' format by @di in pypa/packaging#925

Improve the message around expecting a semicolon by @pradyunsg in pypa/packaging#833

Support nested parens in license expressions by @Liam-DeVoe in pypa/packaging#931

Add space before at symbol in Requirements string by @henryiii in pypa/packaging#953

A root logger use found by ruff LOG, use packaging logger instead by @henryiii in pypa/packaging#965

Better support for subclassing Marker and Requirement by @henryiii in pypa/packaging#1022

Normalize all extras, not just if it comes first by @henryiii in pypa/packaging#1024

Don't produce a broken repr if Marker fails to construct by @henryiii in pypa/packaging#1033

Performance:

Avoid recompiling regexes in the tokenizer for a 3x speedup by @hauntsaninja in pypa/packaging#1019

Improve performance in _manylinux.py by @cthoyt in pypa/packaging#869

Minor cleanups to Version by @bearomorphism in pypa/packaging#913

Skip redundant creation of Versions in specifier comparison by @notatallshaw in pypa/packaging#986

Cache Specifier's Version by @notatallshaw in pypa/packaging#985

Make Version a little faster by @henryiii in pypa/packaging#987

Minor Version regex cleanup by @henryiii in pypa/packaging#990

Faster regex on Python 3.11.5+ by @henryiii in pypa/packaging#988 and pypa/packaging#1055

Lazily calculate _key in Version by @notatallshaw in pypa/packaging#989 and regression for packaging_legacy fixed by @henryiii in pypa/packaging#1048

Faster canonicalize_version by @henryiii in pypa/packaging#993

Use fullmatch in a couple more places by @henryiii in pypa/packaging#992

... (truncated)

Changelog

Sourced from packaging's changelog.

26.0 - 2026-01-20


Features:

PEP 751: support pylock (:pull:900)
PEP 794: import name metadata (:pull:948)
Support for writing metadata to a file (:pull:846)
Support __replace__ on Version (:pull:1003)
Support positional pattern matching for Version and SpecifierSet (:pull:1004)

Behavior adaptations:

PEP 440 handling of prereleases for Specifier.contains, SpecifierSet.contains, and SpecifierSet.filter (:pull:897)
Handle PEP 440 edge case in SpecifierSet.filter (:pull:942)
Adjust arbitrary equality intersection preservation in SpecifierSet (:pull:951)
Return False instead of raising for .contains with invalid version (:pull:932)
Support arbitrary equality on arbitrary strings for Specifier and SpecifierSet's filter and contains method. (:pull:954)
Only try to parse as Version on certain marker keys, return False on unequal ordered comparisons (:pull:939)

Fixes:

Update _hash when unpickling Tag() (:pull:860)
Correct comment and simplify implicit prerelease handling in Specifier.prereleases (:pull:896)
Use explicit _GLibCVersion NamedTuple in _manylinux (:pull:868)
Detect invalid license expressions containing () (:pull:879)
Correct regex for metadata 'name' format (:pull:925)
Improve the message around expecting a semicolon (:pull:833)
Support nested parens in license expressions (:pull:931)
Add space before at symbol in Requirements string (:pull:953)
A root logger use found, use a packaging logger instead (:pull:965)
Better support for subclassing Marker and Requirement (:pull:1022)
Normalize all extras, not just if it comes first (:pull:1024)
Don't produce a broken repr if Marker fails to construct (:pull:1033)

Performance:

Avoid recompiling regexes in the tokenizer for a 3x speedup (:pull:1019)
Improve performance in _manylinux.py (:pull:869)
Minor cleanups to Version (:pull:913)
Skip redundant creation of Version's in specifier comparison (:pull:986)
Cache the Specifier's Version (:pull:985)
Make Version a little faster (:pull:987)
Minor Version regex cleanup (:pull:990)
Faster regex on Python 3.11.5+ for Version (:pull:988, :pull:1055)
Lazily calculate _key in Version (:pull:989, :pull:1048)
Faster canonicalize_version (:pull:993)
Use re.fullmatch in a couple more places (:pull:992, :pull:1029)
Use map instead of generator (:pull:996)
Deprecate ._version (_Version, a NamedTuple) (:pull:995, :pull:1062)

</tr></table>

... (truncated)

Commits

3b77a26 Bump for release
31371cc docs: prepare for 26.0 final (#1063)
9627a88 perf: dual replace (#1064)
d5398b8 fix: restore ._version as a compat shim (#1062)
3a7b600 Bump for development
d4eefdc Bump for release
4618912 docs: prepare for 26.0rc3 (#1060)
0cf1b41 ci: test on first public release of CPythons (#1056)
716beb1 perf: 10% faster stripping zeros (#1058)
350a230 fix: support CPython 3.11.0-3.11.4 and older PyPy3.11 (#1055)
Additional commits viewable in compare view

Updates requests from 2.32.4 to 2.32.5

Release notes

Sourced from requests's releases.

v2.32.5

2.32.5 (2025-08-18)

Bugfixes

The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

Added support for Python 3.14.

Dropped support for Python 3.8 following its end of support.

Changelog

Sourced from requests's changelog.

2.32.5 (2025-08-18)

Bugfixes

The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

Added support for Python 3.14.

Dropped support for Python 3.8 following its end of support.

Commits

b25c87d v2.32.5
131e506 Merge pull request #7010 from psf/dependabot/github_actions/actions/checkout-...

Description has been truncated

Bumps the dependencies group with 17 updates in the / directory: | Package | From | To | | --- | --- | --- | | [sphinx-autobuild](https://github.com/sphinx-doc/sphinx-autobuild) | `2024.10.3` | `2025.8.25` | | [sphinx-rtd-theme](https://github.com/readthedocs/sphinx_rtd_theme) | `3.0.2` | `3.1.0` | | [anyio](https://github.com/agronholm/anyio) | `4.9.0` | `4.12.1` | | [certifi](https://github.com/certifi/python-certifi) | `2025.6.15` | `2026.1.4` | | [charset-normalizer](https://github.com/jawah/charset_normalizer) | `3.4.2` | `3.4.4` | | [click](https://github.com/pallets/click) | `8.2.1` | `8.3.1` | | [idna](https://github.com/kjd/idna) | `3.10` | `3.11` | | [markupsafe](https://github.com/pallets/markupsafe) | `3.0.2` | `3.0.3` | | [packaging](https://github.com/pypa/packaging) | `25.0` | `26.0` | | [requests](https://github.com/psf/requests) | `2.32.4` | `2.32.5` | | [roman-numerals-py](https://github.com/AA-Turner/roman-numerals) | `3.1.0` | `4.1.0` | | [starlette](https://github.com/Kludex/starlette) | `0.49.1` | `0.52.1` | | [typing-extensions](https://github.com/python/typing_extensions) | `4.14.0` | `4.15.0` | | [urllib3](https://github.com/urllib3/urllib3) | `2.6.0` | `2.6.3` | | [uvicorn](https://github.com/Kludex/uvicorn) | `0.34.3` | `0.40.0` | | [watchfiles](https://github.com/samuelcolvin/watchfiles) | `1.1.0` | `1.1.1` | | [websockets](https://github.com/python-websockets/websockets) | `15.0.1` | `16.0` | Updates `sphinx-autobuild` from 2024.10.3 to 2025.8.25 - [Release notes](https://github.com/sphinx-doc/sphinx-autobuild/releases) - [Changelog](https://github.com/sphinx-doc/sphinx-autobuild/blob/main/NEWS.rst) - [Commits](sphinx-doc/sphinx-autobuild@2024.10.03...2025.08.25) Updates `sphinx-rtd-theme` from 3.0.2 to 3.1.0 - [Changelog](https://github.com/readthedocs/sphinx_rtd_theme/blob/master/docs/changelog.rst) - [Commits](readthedocs/sphinx_rtd_theme@3.0.2...3.1.0) Updates `anyio` from 4.9.0 to 4.12.1 - [Release notes](https://github.com/agronholm/anyio/releases) - [Commits](agronholm/anyio@4.9.0...4.12.1) Updates `certifi` from 2025.6.15 to 2026.1.4 - [Commits](certifi/python-certifi@2025.06.15...2026.01.04) Updates `charset-normalizer` from 3.4.2 to 3.4.4 - [Release notes](https://github.com/jawah/charset_normalizer/releases) - [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md) - [Commits](jawah/charset_normalizer@3.4.2...3.4.4) Updates `click` from 8.2.1 to 8.3.1 - [Release notes](https://github.com/pallets/click/releases) - [Changelog](https://github.com/pallets/click/blob/main/CHANGES.rst) - [Commits](pallets/click@8.2.1...8.3.1) Updates `idna` from 3.10 to 3.11 - [Release notes](https://github.com/kjd/idna/releases) - [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst) - [Commits](kjd/idna@v3.10...v3.11) Updates `markupsafe` from 3.0.2 to 3.0.3 - [Release notes](https://github.com/pallets/markupsafe/releases) - [Changelog](https://github.com/pallets/markupsafe/blob/main/CHANGES.rst) - [Commits](pallets/markupsafe@3.0.2...3.0.3) Updates `packaging` from 25.0 to 26.0 - [Release notes](https://github.com/pypa/packaging/releases) - [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst) - [Commits](pypa/packaging@25.0...26.0) Updates `requests` from 2.32.4 to 2.32.5 - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](psf/requests@v2.32.4...v2.32.5) Updates `roman-numerals-py` from 3.1.0 to 4.1.0 - [Release notes](https://github.com/AA-Turner/roman-numerals/releases) - [Changelog](https://github.com/AA-Turner/roman-numerals/blob/master/CHANGES.rst) - [Commits](AA-Turner/roman-numerals@v3.1.0...v4.1.0) Updates `starlette` from 0.49.1 to 0.52.1 - [Release notes](https://github.com/Kludex/starlette/releases) - [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md) - [Commits](Kludex/starlette@0.49.1...0.52.1) Updates `typing-extensions` from 4.14.0 to 4.15.0 - [Release notes](https://github.com/python/typing_extensions/releases) - [Changelog](https://github.com/python/typing_extensions/blob/main/CHANGELOG.md) - [Commits](python/typing_extensions@4.14.0...4.15.0) Updates `urllib3` from 2.6.0 to 2.6.3 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.6.0...2.6.3) Updates `uvicorn` from 0.34.3 to 0.40.0 - [Release notes](https://github.com/Kludex/uvicorn/releases) - [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md) - [Commits](Kludex/uvicorn@0.34.3...0.40.0) Updates `watchfiles` from 1.1.0 to 1.1.1 - [Release notes](https://github.com/samuelcolvin/watchfiles/releases) - [Commits](samuelcolvin/watchfiles@v1.1.0...v1.1.1) Updates `websockets` from 15.0.1 to 16.0 - [Release notes](https://github.com/python-websockets/websockets/releases) - [Commits](python-websockets/websockets@15.0.1...16.0) --- updated-dependencies: - dependency-name: sphinx-autobuild dependency-version: 2025.8.25 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: sphinx-rtd-theme dependency-version: 3.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: anyio dependency-version: 4.12.1 dependency-type: indirect update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: certifi dependency-version: 2026.1.4 dependency-type: indirect update-type: version-update:semver-major dependency-group: dependencies - dependency-name: charset-normalizer dependency-version: 3.4.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: click dependency-version: 8.3.1 dependency-type: indirect update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: idna dependency-version: '3.11' dependency-type: indirect update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: markupsafe dependency-version: 3.0.3 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: packaging dependency-version: '26.0' dependency-type: indirect update-type: version-update:semver-major dependency-group: dependencies - dependency-name: requests dependency-version: 2.32.5 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: roman-numerals-py dependency-version: 4.1.0 dependency-type: indirect update-type: version-update:semver-major dependency-group: dependencies - dependency-name: starlette dependency-version: 0.52.1 dependency-type: indirect update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: typing-extensions dependency-version: 4.15.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: urllib3 dependency-version: 2.6.3 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: uvicorn dependency-version: 0.40.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: watchfiles dependency-version: 1.1.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: websockets dependency-version: '16.0' dependency-type: indirect update-type: version-update:semver-major dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jan 26, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the dependencies group across 1 directory with 17 updates #285

Bump the dependencies group across 1 directory with 17 updates #285

Uh oh!

dependabot bot commented on behalf of github Jan 26, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Bump the dependencies group across 1 directory with 17 updates #285

Are you sure you want to change the base?

Bump the dependencies group across 1 directory with 17 updates #285

Uh oh!

Conversation

dependabot bot commented on behalf of github Jan 26, 2026

Release 2025.08.25

Changelog

unreleased

2025.08.25 - 2025-08-25

2024.10.03 - 2024-10-03

2024.10.02 - 2024-10-02

2024.09.19 - 2024-09-19

2024.09.18 - 2024-09-18

2024.09.17 - 2024-09-17

2024.09.03 - 2024-09-03

3.1.0

3.1.0rc2

3.1.0rc1

4.12.1

4.12.0

4.11.0

4.10.0

Version 3.4.4

3.4.4 (2025-10-13)

Changed

Removed

Misc

Version 3.4.3

3.4.3 (2025-08-09)

Changed

Added

Fixed

Misc

3.4.4 (2025-10-13)

Changed

Removed

Misc

3.4.3 (2025-08-09)

Changed

Added

Fixed

Misc

8.3.1

8.3.0

8.2.2

Version 8.3.1

Version 8.3.0

Version 8.2.2

3.0.3

Version 3.0.3

26.0

What's Changed

v2.32.5

2.32.5 (2025-08-18)

2.32.5 (2025-08-18)

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants